--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-3547
2007-11-29 01:48:17.783142
--------------------------------------------------------------------------------
Name : selinux-policy
Product : Fedora 8
Version : 3.0.8
Release : 58.fc8
URL : http://serefpolicy.sourceforge.net
Summary : SELinux policy configuration
Description :
SELinux Reference Policy - modular.
Based off of reference policy: Checked out revision 2393.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 16 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-58
- Allow nmbd to list inotifyfs_t
- Dontaudit consolekit access to user homedir
- dontaudit nscd getserv and shmemserv
- Allow rsync_t dac overrides
- Allow xfs_t to listen to sockets
* Fri Nov 16 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-57
- Allow lvm to search mnt
- Add booleans for xguest account
xguest_mount_media
xguest_connect_network
xguest_use_bluetooth
* Thu Nov 15 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-56
- Remove /usr/sbin/gdm label
- Label gstreamer codecs in homedir as textrel_shlib_t
* Wed Nov 14 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-55
- Allow spamd to manage razor files
* Mon Nov 12 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-54
- Allow cyrus to authenticate via sasl
- Allow sshd to work in tunnel mode
- Allow sshd to use -R
- Allow ssh to read user homedirs
- Add /var/lib/tftp to tftp.fc
- Add labels for /dev/dmmdi and /dev/admmdi
- Allow postmap to be run by unconfined_t
- Allow dictd to write pid file
- Allow bluetooth to connectto unix_stream_sockets
* Mon Nov 12 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-53
- Allow bugzilla policy to connect to postgresql and mysql on other machines
* Mon Nov 12 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-52
- Allow apache to read unconfined users content
* Sat Nov 10 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-51
- Allow login programs to run mount
- Dontaudit writes to user_home_t for semanage
- Allow sendmail to write to cyrus_stream
- Define /dev/dmmidi1 as a sound_device_t
- Allow saslauthd to use nis_authentication
* Fri Nov 9 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-50
- Allow login programs to delete user temp files
* Thu Nov 8 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-49
- Separate xguest from guest
- Allow confined domains to output to rpm pipes
* Wed Nov 7 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-48
- Add obsoletes selinux-policy-strict
- Run inetd unconfined
- dontaudit loadkeys looking at homedir
* Tue Nov 6 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-47
- Allow all dns_resolves to use avahi stream
- Don't transition from unconfined_t to ping_t
* Tue Nov 6 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-46
- Allow sendmail to interact with winbind
- Allow dovecot to write log files
* Fri Nov 2 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-45
- Allow system_mail_t to domtrans to exim_t
--------------------------------------------------------------------------------
Updated packages:
e301b608c32fd3468b1be5cacb7a5779851ab38f selinux-policy-mls-3.0.8-58.fc8.noarch.rpm
0cfd8add130581f1a5871f1b00486b742eba2222 selinux-policy-devel-3.0.8-58.fc8.noarch.rpm
de6c03233d228c2d88498236b4c13746919154a0 selinux-policy-targeted-3.0.8-58.fc8.noarch.rpm
cb5cc93fd932af2175c8a20f6c66a4cd2ec9a5c7 selinux-policy-3.0.8-58.fc8.noarch.rpm
e246ba5e11336b8cfee322fcb08028e6a8a2d776 selinux-policy-3.0.8-58.fc8.src.rpm
This update can be installed with the "yum" update program. Use
su -c 'yum update selinux-policy'
at the command line. For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-3962
2007-11-29 01:46:57.290638
--------------------------------------------------------------------------------
Name : liferea
Product : Fedora 8
Version : 1.4.8
Release : 2.fc8
URL : http://liferea.sourceforge.net/
Summary : An RSS/RDF feed reader
Description :
Liferea (Linux Feed Reader) is an RSS/RDF feed reader.
It's intended to be a clone of the Windows-only FeedReader.
It can be used to maintain a list of subscribed feeds,
browse through their items, and show their contents.
--------------------------------------------------------------------------------
Update Information:
Updated firefox packages that fix several security issues are now available for Fedora 8.
This update has been rated as having critical security impact by the Fedora Security Response Team.
Mozilla Firefox is an open source Web browser.
A cross-site scripting flaw was found in the way Firefox handled the jar: URI scheme. It was possible for a malicious website to leverage this flaw and conduct a cross-site scripting attack against a user running Firefox. (CVE-2007-5947)
Several flaws were found in the way Firefox processed certain malformed web content. A webpage containing malicious content could cause Firefox to crash, or potentially execute arbitrary code as the user running Firefox. (CVE-2007-5959)
A race condition existed when Firefox set the "window.location" property for a webpage. This flaw could allow a webpage to set an arbitrary Referer header, which may lead to a Cross-site Request Forgery (CSRF) attack against websites that rely only on the Referer header for protection. (CVE-2007-5960)
Users of Firefox are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 27 2007 Christopher Aillon <caillon(a)redhat.com> - 1.4.8-2
- Rebuild against newer gecko
--------------------------------------------------------------------------------
Updated packages:
f3a8735b848a146e641a20e965ee53244d72f7e2 liferea-1.4.8-2.fc8.ppc64.rpm
da23342ccb1fac381d58cab73641cbeaad04c505 liferea-debuginfo-1.4.8-2.fc8.ppc64.rpm
1cb65446c5a6359d58d90139a9daa202177f87b8 liferea-1.4.8-2.fc8.i386.rpm
d57bac3e4f41aac2049cf9c71a049799e497cadd liferea-debuginfo-1.4.8-2.fc8.i386.rpm
74e1dba00d978679318a0b76a924aaf853c41d86 liferea-debuginfo-1.4.8-2.fc8.x86_64.rpm
3a3f550afa0952d0bb80d45b59d113442800dc24 liferea-1.4.8-2.fc8.x86_64.rpm
a220d8f3ddd999771c319323b36a2a9462a9604c liferea-debuginfo-1.4.8-2.fc8.ppc.rpm
a5137b0c65cea0d13a1b9e4b8a91ae3240240095 liferea-1.4.8-2.fc8.ppc.rpm
26f714a59b150ac7fadbab70cf1410fbd6551c18 liferea-1.4.8-2.fc8.src.rpm
This update can be installed with the "yum" update program. Use
su -c 'yum update liferea'
at the command line. For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-3962
2007-11-29 01:46:57.290638
--------------------------------------------------------------------------------
Name : Miro
Product : Fedora 8
Version : 1.0
Release : 2.fc8
URL : http://www.getmiro.com/
Summary : Miro - Internet TV Player
Description :
Miro is a free application that turns your computer into an
internet TV video player. This release is still a beta version, which means
that there are some bugs, but we're moving quickly to fix them and will be
releasing bug fixes on a regular basis.
--------------------------------------------------------------------------------
Update Information:
Updated firefox packages that fix several security issues are now available for Fedora 8.
This update has been rated as having critical security impact by the Fedora Security Response Team.
Mozilla Firefox is an open source Web browser.
A cross-site scripting flaw was found in the way Firefox handled the jar: URI scheme. It was possible for a malicious website to leverage this flaw and conduct a cross-site scripting attack against a user running Firefox. (CVE-2007-5947)
Several flaws were found in the way Firefox processed certain malformed web content. A webpage containing malicious content could cause Firefox to crash, or potentially execute arbitrary code as the user running Firefox. (CVE-2007-5959)
A race condition existed when Firefox set the "window.location" property for a webpage. This flaw could allow a webpage to set an arbitrary Referer header, which may lead to a Cross-site Request Forgery (CSRF) attack against websites that rely only on the Referer header for protection. (CVE-2007-5960)
Users of Firefox are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 26 2007 Alex Lancaster <alexlan(a)fedoraproject.org> 1.0-2
- Build against gecko-libs 1.8.1.10 (firefox 2.0.0.10)
* Fri Nov 16 2007 Alex Lancaster <alexlan(a)fedoraproject.org> 1.0-1
- Update to latest upstream (1.0).
* Fri Nov 9 2007 Alex Lancaster <alexlan(a)fedoraproject.org> 0.9.9.9-1
- Update to latest upstream (0.9.9.9)
- Build against gecko-libs 1.8.1.9 (firefox 2.0.0.9)
- Include xine_extractor in package (thanks to Jason Farrell)
- Drop Miro-setup.py.patch
* Thu Nov 1 2007 Alex Lancaster <alexlan(a)fedoraproject.org> 0.9.9.1-6
- Update patch with workaround suggested on:
http://bugzilla.pculture.org/show_bug.cgi?id=8579
* Wed Oct 31 2007 Alex Lancaster <alexlan(a)fedoraproject.org> 0.9.9.1-5
- Add setup.py patch to ignore call to svn.
* Tue Oct 30 2007 Alex Lancaster <alexlan(a)fedoraproject.org> 0.9.9.1-3
- Add BuildRequires: libXv-devel
- Drop dbus patch
* Sun Oct 28 2007 Alex Lancaster <alexlan(a)fedoraproject.org> 0.9.9.1-1
- Update to latest upstream (0.9.9.1)
* Fri Oct 26 2007 Alex Lancaster <alexlan(a)fedoraproject.org> 0.9.8.1-8
- Replace Requires and BuildRequires for firefox with gecko to
smooth eventual xulrunner transition
--------------------------------------------------------------------------------
Updated packages:
33e426aa00d7d3fe6cfa1d68bfe6991e9c4d9e9e Miro-1.0-2.fc8.ppc64.rpm
f1775cf9f417e5156b747c33f6f8d3becf268ed1 Miro-debuginfo-1.0-2.fc8.ppc64.rpm
8f1ee919c1be2606b834e04c4b1c41ccc1ab012f Miro-debuginfo-1.0-2.fc8.i386.rpm
771d16d6b4a1195c1c5070b0ff8f504d31be7828 Miro-1.0-2.fc8.i386.rpm
72ecb19fd4d977aab37138b0d017a4e70a003dee Miro-1.0-2.fc8.x86_64.rpm
31b4366a43481de24f9bacd49ad8575bd6963abb Miro-debuginfo-1.0-2.fc8.x86_64.rpm
b20d60ac66207d87e1f28902d537dd5853e5f4c1 Miro-1.0-2.fc8.ppc.rpm
25895aa5c9f6804d4979e05f7d0ebba05df2f846 Miro-debuginfo-1.0-2.fc8.ppc.rpm
aeb3745db1cb0f00de7ca333cb7e7686cdd83934 Miro-1.0-2.fc8.src.rpm
This update can be installed with the "yum" update program. Use
su -c 'yum update Miro'
at the command line. For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-3962
2007-11-29 01:46:57.290638
--------------------------------------------------------------------------------
Name : epiphany
Product : Fedora 8
Version : 2.20.1
Release : 6.fc8
URL : http://www.gnome.org/projects/epiphany/
Summary : GNOME web browser based on the Mozilla rendering engine
Description :
epiphany is a simple GNOME web browser based on the Mozilla rendering
engine.
--------------------------------------------------------------------------------
Update Information:
Updated firefox packages that fix several security issues are now available for Fedora 8.
This update has been rated as having critical security impact by the Fedora Security Response Team.
Mozilla Firefox is an open source Web browser.
A cross-site scripting flaw was found in the way Firefox handled the jar: URI scheme. It was possible for a malicious website to leverage this flaw and conduct a cross-site scripting attack against a user running Firefox. (CVE-2007-5947)
Several flaws were found in the way Firefox processed certain malformed web content. A webpage containing malicious content could cause Firefox to crash, or potentially execute arbitrary code as the user running Firefox. (CVE-2007-5959)
A race condition existed when Firefox set the "window.location" property for a webpage. This flaw could allow a webpage to set an arbitrary Referer header, which may lead to a Cross-site Request Forgery (CSRF) attack against websites that rely only on the Referer header for protection. (CVE-2007-5960)
Users of Firefox are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 27 2007 Christopher Aillon <caillon(a)redhat.com> - 2.20.1-6
- Rebuild against newer gecko
* Mon Nov 19 2007 Martin Stransky <stransky(a)redhat.com> - 2.20.1-5
- Updated wrapper patch
* Mon Nov 5 2007 Martin Stransky <stransky(a)redhat.com> - 2.20.1-4
- Rebuild against new firefox
--------------------------------------------------------------------------------
Updated packages:
6ebbc88d17dc9a942cd960f671be4f34a34268e7 epiphany-devel-2.20.1-6.fc8.ppc64.rpm
3747ad508ecb969ae8faf46301c765d576e72c24 epiphany-2.20.1-6.fc8.ppc64.rpm
bd545d2ac069b8141372ee7449d20c87202f65d4 epiphany-debuginfo-2.20.1-6.fc8.ppc64.rpm
b0cae51892818fe5472137d4c2f561f915cf6345 epiphany-devel-2.20.1-6.fc8.i386.rpm
5ddbda747bf074e99cd742d9a0f46b607f458249 epiphany-2.20.1-6.fc8.i386.rpm
72c3e2996dd5beeb9b690d37e291b60707de74c8 epiphany-debuginfo-2.20.1-6.fc8.i386.rpm
7a58ad9b9d68911341743bbaaabfc6ad14f4dc9f epiphany-devel-2.20.1-6.fc8.x86_64.rpm
b488f41252180ca9754f4421bae9e6a741707b1f epiphany-debuginfo-2.20.1-6.fc8.x86_64.rpm
dc606fb7c23e1e781cb0343caa6a109bb68ea824 epiphany-2.20.1-6.fc8.x86_64.rpm
1fb01cc3d0716cc551ee5f903a8d29f9d459bb86 epiphany-debuginfo-2.20.1-6.fc8.ppc.rpm
2a4c108de45cd1221ad47a6ee16d62c8f12b9ea0 epiphany-devel-2.20.1-6.fc8.ppc.rpm
776db393eb2a7e0b7be452d0e0af06f93f4e7021 epiphany-2.20.1-6.fc8.ppc.rpm
32aba352b4827327c8e83265cfb74e98b4efd087 epiphany-2.20.1-6.fc8.src.rpm
This update can be installed with the "yum" update program. Use
su -c 'yum update epiphany'
at the command line. For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-3962
2007-11-29 01:46:57.290638
--------------------------------------------------------------------------------
Name : gnome-web-photo
Product : Fedora 8
Version : 0.3
Release : 7.fc8
URL : http://ftp.gnome.org/pub/GNOME/sources/gnome-web-photo/0.3/
Summary : HTML pages thumbnailer
Description :
gnome-web-photo contains a thumbnailer that will be used by GNOME applications,
including the file manager, to generate screenshots of web pages.
--------------------------------------------------------------------------------
Update Information:
Updated firefox packages that fix several security issues are now available for Fedora 8.
This update has been rated as having critical security impact by the Fedora Security Response Team.
Mozilla Firefox is an open source Web browser.
A cross-site scripting flaw was found in the way Firefox handled the jar: URI scheme. It was possible for a malicious website to leverage this flaw and conduct a cross-site scripting attack against a user running Firefox. (CVE-2007-5947)
Several flaws were found in the way Firefox processed certain malformed web content. A webpage containing malicious content could cause Firefox to crash, or potentially execute arbitrary code as the user running Firefox. (CVE-2007-5959)
A race condition existed when Firefox set the "window.location" property for a webpage. This flaw could allow a webpage to set an arbitrary Referer header, which may lead to a Cross-site Request Forgery (CSRF) attack against websites that rely only on the Referer header for protection. (CVE-2007-5960)
Users of Firefox are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 27 2007 Christopher Aillon <caillon(a)redhat.com> - 0.3-7
- Rebuild against newer gecko
* Tue Nov 6 2007 - Martin Stransky <stransky(a)redhat.com> - 0.3-6
- Rebuild for new Gecko
* Thu Oct 25 2007 - Bastien Nocera <bnocera(a)redhat.com> - 0.3-5
- Rebuild for new Gecko, tighten dependencies
--------------------------------------------------------------------------------
Updated packages:
1e17398bb0a11744717e897c21c835ba87430208 gnome-web-photo-0.3-7.fc8.ppc64.rpm
c8da59676fbb4f09728a8c13a812a7208c498798 gnome-web-photo-debuginfo-0.3-7.fc8.ppc64.rpm
f85d80545788f59ab94daa979a72776c7dbcaedc gnome-web-photo-debuginfo-0.3-7.fc8.i386.rpm
850f154f24ef90d19151576aee45732e9c18a8dc gnome-web-photo-0.3-7.fc8.i386.rpm
9f811f781de9eb0d10ee28661ba8588af8615f00 gnome-web-photo-0.3-7.fc8.x86_64.rpm
27892f23d3d39b4328768150f20417a0db055a8e gnome-web-photo-debuginfo-0.3-7.fc8.x86_64.rpm
e0db74feb2ce786781ae7b3c36571e4c96e9dfdd gnome-web-photo-0.3-7.fc8.ppc.rpm
058cd360b309ef91f590dcf21b0afc4f20897eb2 gnome-web-photo-debuginfo-0.3-7.fc8.ppc.rpm
d7fc4625a0b233c12264fa1f35e06ba9e4c5e8fd gnome-web-photo-0.3-7.fc8.src.rpm
This update can be installed with the "yum" update program. Use
su -c 'yum update gnome-web-photo'
at the command line. For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-3962
2007-11-29 01:46:57.290638
--------------------------------------------------------------------------------
Name : chmsee
Product : Fedora 8
Version : 1.0.0
Release : 1.27.fc8
URL : http://chmsee.gro.clinux.org/
Summary : A Gtk+2 CHM document viewer
Description :
A gtk2 chm document viewer.
It uses chmlib to extract files. It uses gecko to display pages. It supports
displaying multilingual pages due to gecko. It features bookmarks and tabs.
The tabs could be used to jump inside the chm file conveniently. Its UI is
clean and handy, also is well localized. It is actively developed and
maintained. The author of chmsee is Jungle Ji and several other great people.
Hint
* Unlike other chm viewers, chmsee extracts files from chm file, and then read
and display them. The extracted files could be found in $HOME/.chmsee/bookshelf
directory. You can clean those files at any time and there is a special config
option for that.
* The bookmark is related to each file so not all bookmarks will be loaded,
only current file's.
* Try to remove $HOME/.chmsee if you encounter any problem after an upgrade.
--------------------------------------------------------------------------------
Update Information:
Updated firefox packages that fix several security issues are now available for Fedora 8.
This update has been rated as having critical security impact by the Fedora Security Response Team.
Mozilla Firefox is an open source Web browser.
A cross-site scripting flaw was found in the way Firefox handled the jar: URI scheme. It was possible for a malicious website to leverage this flaw and conduct a cross-site scripting attack against a user running Firefox. (CVE-2007-5947)
Several flaws were found in the way Firefox processed certain malformed web content. A webpage containing malicious content could cause Firefox to crash, or potentially execute arbitrary code as the user running Firefox. (CVE-2007-5959)
A race condition existed when Firefox set the "window.location" property for a webpage. This flaw could allow a webpage to set an arbitrary Referer header, which may lead to a Cross-site Request Forgery (CSRF) attack against websites that rely only on the Referer header for protection. (CVE-2007-5960)
Users of Firefox are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 27 2007 Christopher Aillon <caillon(a)redhat.com> - 1.0.0-1.27
- Rebuild against newer gecko
* Sat Nov 10 2007 bbbush <bbbush.yuan(a)gmail.com> - 1.0.0-1.26
- build for firefox-2.0.0.9
--------------------------------------------------------------------------------
Updated packages:
1098badd81d87af9ed080551c1dedb1a9fc961ac chmsee-debuginfo-1.0.0-1.27.fc8.ppc64.rpm
ffe4cbeffa001eacd579c4ae544be9d8737e8410 chmsee-1.0.0-1.27.fc8.ppc64.rpm
da2e1d11d2d8e51fcaac1f4549ec7f8d259f1997 chmsee-1.0.0-1.27.fc8.i386.rpm
0ba5bc2d8fe62c4fb12ed2c92ef7d192952142dc chmsee-debuginfo-1.0.0-1.27.fc8.i386.rpm
7d86377cfcc69f74de8b85782d40fca2c781a972 chmsee-1.0.0-1.27.fc8.x86_64.rpm
613d8714e4714568a25161c85b98a8fbfa26f2fa chmsee-debuginfo-1.0.0-1.27.fc8.x86_64.rpm
7481912d0d867466ddb6c8258f4fa72a98d36cc5 chmsee-debuginfo-1.0.0-1.27.fc8.ppc.rpm
223946638645c5e418705f6ae7f6ec329e42917d chmsee-1.0.0-1.27.fc8.ppc.rpm
d271ecc07bc2cb5e58033f1b2581aa991e3db155 chmsee-1.0.0-1.27.fc8.src.rpm
This update can be installed with the "yum" update program. Use
su -c 'yum update chmsee'
at the command line. For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-3962
2007-11-29 01:46:57.290638
--------------------------------------------------------------------------------
Name : kazehakase
Product : Fedora 8
Version : 0.5.0
Release : 1.fc8.2
URL : http://kazehakase.sourceforge.jp/
Summary : Kazehakase browser
Description :
Kazehakase is a Web browser which aims to provide
a user interface that is truly user-friendly & fully customizable.
--------------------------------------------------------------------------------
Update Information:
Updated firefox packages that fix several security issues are now available for Fedora 8.
This update has been rated as having critical security impact by the Fedora Security Response Team.
Mozilla Firefox is an open source Web browser.
A cross-site scripting flaw was found in the way Firefox handled the jar: URI scheme. It was possible for a malicious website to leverage this flaw and conduct a cross-site scripting attack against a user running Firefox. (CVE-2007-5947)
Several flaws were found in the way Firefox processed certain malformed web content. A webpage containing malicious content could cause Firefox to crash, or potentially execute arbitrary code as the user running Firefox. (CVE-2007-5959)
A race condition existed when Firefox set the "window.location" property for a webpage. This flaw could allow a webpage to set an arbitrary Referer header, which may lead to a Cross-site Request Forgery (CSRF) attack against websites that rely only on the Referer header for protection. (CVE-2007-5960)
Users of Firefox are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 27 2007 Christopher Aillon <caillon(a)redhat.com>
- Rebuild against newer gecko
* Tue Nov 6 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.5.0-1.dist.1
- Rebuild against new gecko engine
- Switch to use gecko virtual dependency (bug 352091)
* Mon Oct 29 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.5.0-1
- 0.5.0
--------------------------------------------------------------------------------
Updated packages:
c3553198fb8c18d88bd878bd5bfe1a784f9a70cb kazehakase-debuginfo-0.5.0-1.fc8.2.ppc64.rpm
f2e7f9507d79c2ea71b738b8737fab52ee638a64 kazehakase-ruby-0.5.0-1.fc8.2.ppc64.rpm
3b2fa9624bc22e9d518ea204f9eca1bce49a39b8 kazehakase-0.5.0-1.fc8.2.ppc64.rpm
dc42757288737b4b74160d37e1616d4715c73eb2 kazehakase-hyperestraier-0.5.0-1.fc8.2.ppc64.rpm
923ba12a0ded6fb9b8fd883f1ba41ee7857bbb30 kazehakase-0.5.0-1.fc8.2.i386.rpm
f712259dc78c58171ec2a9433bcb76caf115b9f1 kazehakase-debuginfo-0.5.0-1.fc8.2.i386.rpm
fa7773159bca526f07712d0b9ecb100e83835e2c kazehakase-hyperestraier-0.5.0-1.fc8.2.i386.rpm
85052b2c4d415130e2c60e104cf398d72231d8e7 kazehakase-ruby-0.5.0-1.fc8.2.i386.rpm
6cd896ef79f3dbe740692f12d4048d27852e5ecd kazehakase-ruby-0.5.0-1.fc8.2.x86_64.rpm
dcf8c8b481127175f78764a5460518bdaef8b31d kazehakase-hyperestraier-0.5.0-1.fc8.2.x86_64.rpm
a7f63aaecb60ff43b00a4dc142e3d83e73de9c93 kazehakase-debuginfo-0.5.0-1.fc8.2.x86_64.rpm
af1c7925a8770b4bfd1c1c24f645fbd9b7f18214 kazehakase-0.5.0-1.fc8.2.x86_64.rpm
ffd11f8e7f92e4272389052ff69595d89b89a77f kazehakase-debuginfo-0.5.0-1.fc8.2.ppc.rpm
a7a27eb3d32376803be06b14f2de561f3eb68771 kazehakase-hyperestraier-0.5.0-1.fc8.2.ppc.rpm
0c596fd91e235f3f08e0273dc4e33767f1f97b2f kazehakase-0.5.0-1.fc8.2.ppc.rpm
510de654471f31c01c24ee738f633f4f35ae30d0 kazehakase-ruby-0.5.0-1.fc8.2.ppc.rpm
db85be03f7c2b7a18a2447e96c17dce60453e59e kazehakase-0.5.0-1.fc8.2.src.rpm
This update can be installed with the "yum" update program. Use
su -c 'yum update kazehakase'
at the command line. For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-3962
2007-11-29 01:46:57.290638
--------------------------------------------------------------------------------
Name : yelp
Product : Fedora 8
Version : 2.20.0
Release : 6.fc8
URL : http://live.gnome.org/Yelp
Summary : A system documentation reader from the Gnome project
Description :
Yelp is the Gnome 2 help/documentation browser. It is designed
to help you browse all the documentation on your system in
one central tool.
--------------------------------------------------------------------------------
Update Information:
Updated firefox packages that fix several security issues are now available for Fedora 8.
This update has been rated as having critical security impact by the Fedora Security Response Team.
Mozilla Firefox is an open source Web browser.
A cross-site scripting flaw was found in the way Firefox handled the jar: URI scheme. It was possible for a malicious website to leverage this flaw and conduct a cross-site scripting attack against a user running Firefox. (CVE-2007-5947)
Several flaws were found in the way Firefox processed certain malformed web content. A webpage containing malicious content could cause Firefox to crash, or potentially execute arbitrary code as the user running Firefox. (CVE-2007-5959)
A race condition existed when Firefox set the "window.location" property for a webpage. This flaw could allow a webpage to set an arbitrary Referer header, which may lead to a Cross-site Request Forgery (CSRF) attack against websites that rely only on the Referer header for protection. (CVE-2007-5960)
Users of Firefox are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 27 2007 Christopher Aillon <caillon(a)redhat.com> - 2.20.0-6
- Rebuild against newer gecko
* Mon Nov 5 2007 Matthias Clasen <mclasen(a)redhat.com> - 2.20.0-5
- Fix a crash in search (#361041)
* Mon Nov 5 2007 Martin Stransky <stransky(a)redhat.com> - 2.20.0-4
- Rebuild against new firefox
* Sun Nov 4 2007 Matthias Clasen <mclasen(a)redhat.com> - 2.20.0-3
- Fix a crash when loading the rarian docs
--------------------------------------------------------------------------------
Updated packages:
411dbbed76fa4f5e49bda42971e20721accdf327 yelp-debuginfo-2.20.0-6.fc8.ppc64.rpm
414a77884d93ecde459aad0833e76b455c636ffb yelp-2.20.0-6.fc8.ppc64.rpm
b8095b6ecdb47570ee7b2032515e0dcedb0d871e yelp-debuginfo-2.20.0-6.fc8.i386.rpm
eda1926a021f9ed629e69e0f617ee8987394a806 yelp-2.20.0-6.fc8.i386.rpm
ab6b92022e5a2866624c7093982ae252d94c2052 yelp-debuginfo-2.20.0-6.fc8.x86_64.rpm
c99ecfcb5f63cfd8ad26241af5d061d50615f4b9 yelp-2.20.0-6.fc8.x86_64.rpm
1375710fa2e141ff34da214195230a1e58ce1e93 yelp-debuginfo-2.20.0-6.fc8.ppc.rpm
2f056ed4fa5f8cb58c772c50d113b1ac6b1dbdbc yelp-2.20.0-6.fc8.ppc.rpm
620f1becf6c545183b0b57cba9b7422a2083eed0 yelp-2.20.0-6.fc8.src.rpm
This update can be installed with the "yum" update program. Use
su -c 'yum update yelp'
at the command line. For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-3962
2007-11-29 01:46:57.290638
--------------------------------------------------------------------------------
Name : gtkmozembedmm
Product : Fedora 8
Version : 1.4.2.cvs20060817
Release : 17.fc8
URL : http://gtkmm.sourceforge.net/
Summary : C++ wrapper for GtkMozembed
Description :
This package provides a C++/gtkmm wrapper for GtkMozEmbed
from Mozilla 1.4.x to 1.7.x.
The wrapper provides a convenient interface for C++ programmers
to use the Gtkmozembed HTML-rendering widget inside their software.
--------------------------------------------------------------------------------
Update Information:
Updated firefox packages that fix several security issues are now available for Fedora 8.
This update has been rated as having critical security impact by the Fedora Security Response Team.
Mozilla Firefox is an open source Web browser.
A cross-site scripting flaw was found in the way Firefox handled the jar: URI scheme. It was possible for a malicious website to leverage this flaw and conduct a cross-site scripting attack against a user running Firefox. (CVE-2007-5947)
Several flaws were found in the way Firefox processed certain malformed web content. A webpage containing malicious content could cause Firefox to crash, or potentially execute arbitrary code as the user running Firefox. (CVE-2007-5959)
A race condition existed when Firefox set the "window.location" property for a webpage. This flaw could allow a webpage to set an arbitrary Referer header, which may lead to a Cross-site Request Forgery (CSRF) attack against websites that rely only on the Referer header for protection. (CVE-2007-5960)
Users of Firefox are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 27 2007 Christopher Aillon <caillon(a)redhat.com> - 1.4.2.cvs20060817-17
- Rebuild against newer gecko
* Tue Nov 20 2007 Haïkel Guémar <karlthered(a)gmail.com> - 1.4.2.cvs20060817-16
- Rebuild against new firefox
--------------------------------------------------------------------------------
Updated packages:
b05c3747c7f890a086355958f967845abf0e4d7b gtkmozembedmm-debuginfo-1.4.2.cvs20060817-17.fc8.ppc64.rpm
8fc675b22f99ecc1c27628d4b8983505bfc6ea49 gtkmozembedmm-1.4.2.cvs20060817-17.fc8.ppc64.rpm
e87633086a216109588c1c154a54d22036d7b3a8 gtkmozembedmm-devel-1.4.2.cvs20060817-17.fc8.ppc64.rpm
f307921e01e20c6184d34e09a16bd476bdc82041 gtkmozembedmm-1.4.2.cvs20060817-17.fc8.i386.rpm
5447a7dd99e98b4c0ff591e70597f273b9262193 gtkmozembedmm-devel-1.4.2.cvs20060817-17.fc8.i386.rpm
d02e69916ee2474127f5a2ee5774d610c71d2a7d gtkmozembedmm-debuginfo-1.4.2.cvs20060817-17.fc8.i386.rpm
e9e6c67fce2dd7989c9c960f3d6992d5547c3199 gtkmozembedmm-devel-1.4.2.cvs20060817-17.fc8.x86_64.rpm
37d114479781534565c5cb36270b7ed2c7750de5 gtkmozembedmm-debuginfo-1.4.2.cvs20060817-17.fc8.x86_64.rpm
9fff99c851a785aa6626ffc374884eb999ab07e5 gtkmozembedmm-1.4.2.cvs20060817-17.fc8.x86_64.rpm
1bd13dd5ae36be5f3fd08cec8f94f6238b752e71 gtkmozembedmm-devel-1.4.2.cvs20060817-17.fc8.ppc.rpm
1d6199b8d8f2ffab3a47c842b507e01ebccfce18 gtkmozembedmm-1.4.2.cvs20060817-17.fc8.ppc.rpm
8307a0577505d364c029d2700f3187d60a9c45fe gtkmozembedmm-debuginfo-1.4.2.cvs20060817-17.fc8.ppc.rpm
f1b9c142fe37728adf8b285f69c2ab3bfe1eae8a gtkmozembedmm-1.4.2.cvs20060817-17.fc8.src.rpm
This update can be installed with the "yum" update program. Use
su -c 'yum update gtkmozembedmm'
at the command line. For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-3962
2007-11-29 01:46:57.290638
--------------------------------------------------------------------------------
Name : gnome-python2-extras
Product : Fedora 8
Version : 2.19.1
Release : 11.fc8
URL : http://www.pygtk.org/
Summary : The sources for additional. PyGNOME Python extension modules.
Description :
The gnome-python-extra package contains the source packages for additional
Python bindings for GNOME. It should be used together with gnome-python.
--------------------------------------------------------------------------------
Update Information:
Updated firefox packages that fix several security issues are now available for Fedora 8.
This update has been rated as having critical security impact by the Fedora Security Response Team.
Mozilla Firefox is an open source Web browser.
A cross-site scripting flaw was found in the way Firefox handled the jar: URI scheme. It was possible for a malicious website to leverage this flaw and conduct a cross-site scripting attack against a user running Firefox. (CVE-2007-5947)
Several flaws were found in the way Firefox processed certain malformed web content. A webpage containing malicious content could cause Firefox to crash, or potentially execute arbitrary code as the user running Firefox. (CVE-2007-5959)
A race condition existed when Firefox set the "window.location" property for a webpage. This flaw could allow a webpage to set an arbitrary Referer header, which may lead to a Cross-site Request Forgery (CSRF) attack against websites that rely only on the Referer header for protection. (CVE-2007-5960)
Users of Firefox are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 27 2007 Christopher Aillon <caillon(a)redhat.com> - 2.19.1-11
- Rebuild against newer gecko
* Sat Nov 10 2007 Alex Lancaster <alexl(a)users.sourceforge.net> - 2.19.1-10.fc8
- Rebuild against gecko-libs 1.8.1.9
--------------------------------------------------------------------------------
Updated packages:
0f9c28b49307ab2980ac72a20aaae629c36ec2cb gnome-python2-gtkhtml2-2.19.1-11.fc8.ppc64.rpm
91b5b44eb7c702668165a7c4c1292a164c6a5507 gnome-python2-gda-2.19.1-11.fc8.ppc64.rpm
0c6527c8a9a5ce741b09f493fec2c5b02733e537 gnome-python2-gda-devel-2.19.1-11.fc8.ppc64.rpm
92ad02fce81bcef8fadcf668d78895857c560714 gnome-python2-extras-2.19.1-11.fc8.ppc64.rpm
200fb0599f8304723162f66f1cbe9637f1b82dfe gnome-python2-gtkspell-2.19.1-11.fc8.ppc64.rpm
d9931f561fab73c90883781ffe67690e7ac768e5 gnome-python2-libegg-2.19.1-11.fc8.ppc64.rpm
6c8c3aa2472740ea52be0dbbd09c8138e13df360 gnome-python2-extras-debuginfo-2.19.1-11.fc8.ppc64.rpm
ed1b701a622a37414f25a1d7137c688a5f74646f gnome-python2-gtkmozembed-2.19.1-11.fc8.ppc64.rpm
07c7f752ee490534d681f62219ec0c542ac8c85e gnome-python2-gda-devel-2.19.1-11.fc8.i386.rpm
e1cf4a7caccebe00a8df3d3dbec864a441fd41f4 gnome-python2-gda-2.19.1-11.fc8.i386.rpm
8fddbda17e3bb52c6c90d5a6dc94f7bbb20e6f1b gnome-python2-gtkmozembed-2.19.1-11.fc8.i386.rpm
68dad5a3864662c9a92a8bf83aefc29c1f9b1f3c gnome-python2-gtkhtml2-2.19.1-11.fc8.i386.rpm
87672f3ebb970dfc3027deaf6e843cb470852821 gnome-python2-libegg-2.19.1-11.fc8.i386.rpm
48d81165b20feb81ee8aedd3fc75a79f9aa16e95 gnome-python2-gdl-2.19.1-11.fc8.i386.rpm
3430b476adff5e756c2a6b5cadacd750ba13d500 gnome-python2-extras-debuginfo-2.19.1-11.fc8.i386.rpm
750bc291637f98772339fc34bae18315a2c18f98 gnome-python2-gtkspell-2.19.1-11.fc8.i386.rpm
f7002a480889678badf2f235d57c8e49edb6c90e gnome-python2-extras-2.19.1-11.fc8.i386.rpm
4c991f8d88c0081b810ca0b9ed672044474cf9c0 gnome-python2-gtkmozembed-2.19.1-11.fc8.x86_64.rpm
b1d0fcf8422d4c9758e9a4203e699fcc4be9dace gnome-python2-gtkspell-2.19.1-11.fc8.x86_64.rpm
eeedc86a493bed8f8d465299dfb9e64458986a1b gnome-python2-gdl-2.19.1-11.fc8.x86_64.rpm
7ae15b3c45560de3e11bd6ffe994f6e2b50a8b5e gnome-python2-gtkhtml2-2.19.1-11.fc8.x86_64.rpm
ba7d9b80c54b1e37187d6571016e8dd808f2c745 gnome-python2-gda-2.19.1-11.fc8.x86_64.rpm
b016460c27f23f29fa2dd6508efededf274152bf gnome-python2-extras-2.19.1-11.fc8.x86_64.rpm
5db7e71f995713e340f36514f7cc87261ba2353d gnome-python2-libegg-2.19.1-11.fc8.x86_64.rpm
2594808ce641edbb765553cbd45526c8c1eb7982 gnome-python2-extras-debuginfo-2.19.1-11.fc8.x86_64.rpm
b0f106f496fad58f685a0e983b08cc80f3464483 gnome-python2-gda-devel-2.19.1-11.fc8.x86_64.rpm
10b9fa17f25e050d4c560439c33cb90bbb01f8e0 gnome-python2-gtkspell-2.19.1-11.fc8.ppc.rpm
98c9ee548b4a02d5c66407a8f7a66c075531f3ec gnome-python2-gtkmozembed-2.19.1-11.fc8.ppc.rpm
ba87cd6a55a96885591b21a7312306e6d9312d60 gnome-python2-extras-debuginfo-2.19.1-11.fc8.ppc.rpm
2efe9e3f891bb0ffe5c85339408a84951d8b651b gnome-python2-gda-devel-2.19.1-11.fc8.ppc.rpm
0eec2f8f911beabc0d5bf58a9c3f5bf34865065c gnome-python2-extras-2.19.1-11.fc8.ppc.rpm
f3c3d74653c49c1668cec74811b0f6ffdaaf7119 gnome-python2-libegg-2.19.1-11.fc8.ppc.rpm
78e2db7b11db83016332dea4737eb96871be5b41 gnome-python2-gdl-2.19.1-11.fc8.ppc.rpm
e37d12890c81b55cab321a7e46382c0dfa0d5f67 gnome-python2-gtkhtml2-2.19.1-11.fc8.ppc.rpm
14b08235feb370a7736dd0203c804b90b1fe5b03 gnome-python2-gda-2.19.1-11.fc8.ppc.rpm
246be36d28daa2b69af98924f5741f1f8d386a71 gnome-python2-extras-2.19.1-11.fc8.src.rpm
This update can be installed with the "yum" update program. Use
su -c 'yum update gnome-python2-extras'
at the command line. For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------